Security Regarding Data in the Assessment

B Lab, its affiliates, or its contractors, may use the information you submit through the B Impact Assessment to develop and validate the Assessment. Separately, B Lab reserves the right to share aggregated and anonymous data on B Analytics with its affiliates, contractors, partners, academics, and in publications, based upon data submitted through this system.  When aggregated in this way, B Lab will use commercially reasonable efforts to ensure that Company data does not appear with identifiable information or in a benchmark group with less than five other data points. Notwithstanding B Lab’s efforts, it is possible that partners, academics, readers or other users would be able to determine the identity of the Company based on the anonymous information.

TABLE OF CONTENTS

• File Security
• File Storage Policy
• File Access Policy
• File Retention Policy

File Security

To complete the B Certification process, you will be asked to provide documentation for our review team to evaluate.  This data is necessary to validate an assessment score and is not intended to be shared or permanently stored.  To ensure your data is secure, we have implemented the following file security policies.

File Storage Policy

Files are stored in a private Amazon S3 file store.  2-factor authentication is required for all accounts.

File Access Policy

Files will only be accessible by the following groups:

- Account owners

- Review team members

- System administrators

- Global partners with access to your region

File Retention Policy

All uploaded files attached to an assessment will be deleted unless:

1. The file is attached to an assessment/review that is currently in progress

2. The file is attached to an assessment/review that was completed in the last 6 months

There is currently no time limit to how long a file will be preserved if it is attached to an ongoing assessment.  

However, a company may request the permanent deletion of all files at any time. 

In the event that you have indicated your affiliation with, or membership in one of our Standards Partners organizations, B Lab reserves the right to share your information with our Standards Partners (organizations that B Lab has entered into a relationship with in regards to the B Impact Assessment or B Analytics). Data that is shared with our Standards Partners are subject to the privacy policies of our partners.

Users entering material into the Web Site are responsible for the content of that material. B Lab does not have responsibility for other Content, including the content of any messages or information posted by Users or others, or for the content of information accessible via direct or indirect hyperlinks from the Web Site. Nevertheless, B Lab retains the right, which it may or may not exercise in its sole discretion, to review, edit, or delete other Content that B Lab deems to be illegal, offensive, or otherwise inappropriate.

For a detailed description of our Terms of Use see here: https://www.bcorporation.net/en-us/terms-of-use

For a detailed description of our Privacy Policy see here: https://bcorporation.net/privacy-policy